-
Bug
-
Resolution: Won't Do
-
Normal
-
None
-
None
-
None
Description of problem:
FIPS-enabled Satellite 6.11 on RHEL8
Version-Release number of selected component (if applicable):
python3-suds-0.7-0.11.94664ddd46a6.el8.noarch
virt-who-1.30.12-3.el8_7.noarch
kernel-modules-4.18.0-372.19.1.el8_6.x86_64
kernel-4.18.0-372.19.1.el8_6.x86_64
kernel-modules-4.18.0-425.10.1.el8_7.x86_64
kernel-tools-libs-4.18.0-425.10.1.el8_7.x86_64
kernel-4.18.0-425.10.1.el8_7.x86_64
kernel-modules-4.18.0-425.3.1.el8.x86_64
kernel-core-4.18.0-425.10.1.el8_7.x86_64
kernel-core-4.18.0-425.3.1.el8.x86_64
kernel-4.18.0-425.3.1.el8.x86_64
kernel-tools-4.18.0-425.10.1.el8_7.x86_64
kernel-core-4.18.0-372.19.1.el8_6.x86_64
How reproducible:
FIPS is accepted by the installer.
- satellite-installer -S satellite returned no error.
The satellite is up and running only virt-who is not working.
Steps to Reproduce:
~~~
[virt-who-config-4]
type=hyperv
hypervisor_id=hostname
owner=xxxx
server=https://xxxxxx:5986/wsman
username=xxxxxxxxxxxxxx
encrypted_password=e3sjdh8abfb2a2a7162f750799e9ccb9429a
rhsm_hostname=xxxxx.xxx.xxx
rhsm_username=virt_who_reporter_4
rhsm_encrypted_password=a84d9b822414fbe410a7312990f155bdcc94c3a3c5dc440a8ddc8de47260c0c0
rhsm_prefix=/rhsm
~~~
Actual results:
2023-02-13 07:40:31,197 [virtwho.main ERROR] MainProcess(977233):Thread-2 @virt.py:run:421 - Thread 'virt-who-config-4' fails with exception:
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/virtwho/virt/virt.py", line 412, in run
self._run()
File "/usr/lib/python3.6/site-packages/virtwho/virt/virt.py", line 367, in _run
data_to_send = self._get_data()
File "/usr/lib/python3.6/site-packages/virtwho/virt/virt.py", line 980, in _get_data
return self._get_report()
File "/usr/lib/python3.6/site-packages/virtwho/virt/virt.py", line 968, in _get_report
return HostGuestAssociationReport(self.config, self.getHostGuestMapping())
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 561, in getHostGuestMapping
"root/virtualization")
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 417, in Enumerate
body = self.post(data)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 380, in post
response = self.connection.post(self.url, body, headers=headers)
File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 581, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 533, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python3.6/site-packages/requests/sessions.py", line 653, in send
r = dispatch_hook('response', hooks, r, **kwargs)
File "/usr/lib/python3.6/site-packages/requests/hooks.py", line 31, in dispatch_hook
_hook_data = hook(hook_data, **kwargs)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 238, in handle_response
return self.retry_ntlm_negotiate(response, **kwargs)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 129, in retry_ntlm_negotiate
return self.retry_ntlm_authenticate(r, **kwargs)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/hyperv.py", line 141, in retry_ntlm_authenticate
negotiate = base64.b64encode(self.ntlm.authentication_message(base64.b64decode(challenge), self.password))
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/ntlm.py", line 527, in authentication_message
challenge.negotiate_flags)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/ntlm.py", line 391, in _init_
self._compute_encryption_data()
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/ntlm.py", line 399, in _compute_encryption_data
response_key_nt = response_key_lm = ntowfv2(self.password, self.username, self.domain)
File "/usr/lib/python3.6/site-packages/virtwho/virt/hyperv/ntlm.py", line 98, in ntowfv2
key=hashlib.new('md4', passwd.encode('utf-16le')).digest(),
File "/usr/lib64/python3.6/hashlib.py", line 179, in __hash_new
name, data, usedforsecurity=usedforsecurity)
ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS
Expected results:
Additional info:
sosreport and details are on the case that is attached
- external trackers